search

vboxme / Portable-VirtualBox

Portable-VirtualBox is a free and open source software tool that lets you run any operating system from a usb stick without separate installation.
Other
832 stars 234 forks source link

Any working alternatives? #89

Open ghost opened 2 years ago

ghost commented 2 years ago

As this project seems to be abandoned and outdated, do you know if there is any similar project which is being maintained and up-to-date?

badrelmers commented 1 year ago

forget about Active File Recovery and getdataback , both cannot detect vmdk files when they are lost, they do not have the file signature needed to recognise them. we have one final hope, do this:

it will be fast, if he find something he will save it automatically to the folder you choosed above, when he finishes navigate on all the folders and see if there is some files with 80gb or 90 or more of size, this is your vmdk probably. to know if it is your lost vmdk, right click on the file and choose 7-Zip>Open archive. if you see two files 0.img and 1.img like this picture then this is your vmdk. image

send me the a pic of 7ZIP if you found something

and don t forget do not write anything more to the partition where the vmdk was saved ( partition O:)

good luck

p060477 commented 1 year ago

hi, first thxs again and forever for what of so gentle and precious you are doing for helping me then: i followed yr so clear instructions but...as for active file recovery also in this case when the application is near the 38% of its work it crash... i attached here the event viewer error, is exactly the same for both sw... errore.txt

what you think...??... how can i solve? always started as admin...both sw...same error at 38%...the difference is that in the first case,active file recovery it takes about 8 hours to reach that point...with this second sw you suggest about 1 hour and half... thxs so much again and apologize me again cheers

badrelmers commented 1 year ago

the error says that your hard disk may be dying lets scan it and solve what it can be solved...

p060477 commented 1 year ago

hi, thxs again and forever cmd says i do not have enough privileges but i remind that maybe i should run it as admin so at least this thing i was able to... here it is the scan result:

Microsoft Windows [Versione 10.0.19045.2965] (c) Microsoft Corporation. Tutti i diritti sono riservati.

C:\WINDOWS\system32>CHKDSK O: /X /F Il file system è di tipo NTFS. Volume smontato. Tutti gli handle del volume aperti non sono più validi. L'etichetta del volume è Dati.

Fase 1: analisi della struttura del file system di base in corso... 239360 record file elaborati. Verifica file completata. Durata fase (Verifica record di file): 8.57 secondi. 126 record di file di grandi dimensioni elaborati. Durata fase (Recupero record di file orfani): 0.00 millisecondi. 0 record file non validi elaborati. Durata fase (Controllo record di file non validi): 1.38 millisecondi.

Fase 2: analisi del collegamento dei nomi file in corso... 464 record reparse elaborati. 275848 voci di indice elaborate. Verifica indici completata. Durata fase (Verifica dell'indice): 59.35 secondi. 0 file non indicizzati analizzati. Durata fase (Riconnessione orfano): 132.47 millisecondi. 0 file non indicizzati ripristinati nella cartella dei file persi e ritrovati. Durata fase (Ripristino orfano nella cartella dei file persi e ritrovati): 0.61 millisecondi. 464 record reparse elaborati. Durata fase (Verifica reparse point e ID oggetto): 8.71 millisecondi.

Fase 3: analisi dei descrittori di sicurezza in corso... Verifica descrittori di sicurezza completata. Durata fase (Verifica descrittori di sicurezza): 50.23 millisecondi. 18245 file di dati elaborati. Durata fase (Verifica attributi dati): 2.08 millisecondi. CHKDSK sta verificando il journal USN... 39820736 byte USN elaborati. Verifica del journal USN completata. Durata fase (Verifica journal USN): 574.83 millisecondi.

Analisi del file system effettuata. Nessun problema rilevato. Non sono necessarie ulteriori azioni.

334511815 KB di spazio totale su disco. 166934468 KB in 114128 file. 46720 KB in 18246 indici. 8 KB in settori danneggiati. 354887 KB in uso dal sistema. 65536 KB occupati dal file registro. 167175732 KB disponibili su disco.

  4096 byte in ogni unità di allocazione.

83627953 unità totali di allocazione su disco. 41793933 unità di allocazione disponibili su disco. Durata totale: 1.14 minuti (68736 ms).

C:\WINDOWS\system32>

what you think...?? reading the event viewer repo i understand that the problem was not in O:\ but in reading/finding a .dll in I:\ : "Percorso dell'applicazione che ha generato l'errore: I:\RECOVER\testdisk-7.2-WIP.win\testdisk-7.2-WIP\qphotorec_win.exe Percorso del modulo che ha generato l'errore: I:\RECOVER\testdisk-7.2-WIP.win\testdisk-7.2-WIP\Qt5Widgets.dll" which is really not on my physical drive but on external hd cause you say not to do any activity in the partition and you say that i must have lot of space trying to recover the vmdks...so i'm doing the tests and trying on a external hd and I:\ is its partition of 1TB...

anyway after more then 5 hours of scan here are the pic. you ask:

vmdk more then 8gb found:

vmdk sopra 8gb

pic of 7ZIP of the greatest, the one of 138gb:

vmdk max dim 138gb

and now...?

let me thank you so much again from the very deep of my heart cheers

thxs so much again cheers

badrelmers commented 1 year ago

in the chdsk scan there is:

8 KB in settori danneggiati.= 8KB of bad sectors

this means that your hard disk started dying, now chdsk did not solve the problem , he just hided the problem but this does not mean that your disk will die soon, it may work for several years more , but nobody can know when it will happen. it is related to how intensive you work on them, and the quality of the hard disk.

that is why I told you do backup of your important things in an external hard disk that you use only for backups. and do not backup things that you can redownload from internet, backup only your most important things that you cannot recover or redownload once it is lost. so you can manage the backup easier and you can do backups every week or every month at least.

reading the event viewer repo i understand that the problem was not in O:\ but in reading/finding a .dll in I:\ :

no, it is O: but because photorec was in I: and was the program that suffered from the bad sectors of o: then the event show I:

anyway you have to do the same chkdsk with all your partitions from time to time to know how healthy they are and to solve hidden problems like this one.

so instead of CHKDSK O: /X /F change O: with your other partitions and scan them using the same method, for example for the partition I: do CHKDSK I: /X /F

thanks to God now we have something at least. but as I told you before do not expect to recover 100% of the vmdk file, part of the vmdk may be lost for ever because of writing on the partition after the disaster. but we may be able to recover something at least, it depends.

now do this test: prepare a setup of ldplayer that was working with the old vmdk, enter the ldplayer folder and go to vms\leidian0 then rename data.vmd and sdcard.vmdk to something else. now copy the vmdk files you recovered to the ldplayer folder, put them inside vms\leidian0 folder, do it one by one, but do not move the vmdk , just copy them and keep the original ones you recovered in a safe place. after you copy the first vmdk to LDPlayer9\vms\leidian0 folder change its name to data.vmdk . then copy the sdcard.vmdk that you saved in O:\myVMBOX , the one that was not deleted when the vmdk was deleted, copy it to LDPlayer9\vms\leidian0 too (we need to use the same sdcard.vmdk that was used with the old vmdk that was deleted ). now run ldplayer, if the vmdk is not damaged too much he may be able to run as usually, then repeat the same with all the vmdk you recovered if the first vmdk did not work.

do this too, right click on every vmdk you recovered then choose 7zip>open archive and see if they all have the two files called 0.img 1.img. send me a pic of everyone that have the 1.img

explain to me how you was saving the whatsapp discussions? tell me the method you used in detail and where you were saving those discussions.

p060477 commented 1 year ago

hi, let me thxs you again for yr kind helping and patience photorec finds 22 vmdk ,14 from 33mb to 5gb, but considering what you told me i put aside only the 8 from 8gb to 138gb here are the relative pic in ZIP you ask, in size crescent order:

8408 MB 8408 MB 8428 MB 8428 MB 12171 MB 12171 MB 12258 MB 12258 MB 21467 MB 21467 MB 33730 MB 33730 MB 61551 MB 61551 MB 138005 MB 138005 MB

what do you think? which are the one you suggest to prove? thxs so much again from the deep of my physical heart cheers

badrelmers commented 1 year ago

i cannot be sure. test them all ,but start with those one first: 8408 MB 12171 MB 21467 MB

p060477 commented 1 year ago

hi and thanks so much again: i've tested the first 7 in order of size, from 8408 to 61551 MB here are the results: 1) blocks itself during the start at 50% 2) works but it is of the very late 06. dec .22 i realize it by the whatsapp version 3-4-5) starts but as -default- clean first start LdPlayer...the same as if i dl the sw and run it as for the very first time 6)-7) works but it is the one backed a month ago on ext hd, cause i know since years about 8KB bad sectors in my 1st Ph. hd
drive so i take a back up nearly montly as you also just suggest..., so it is not the latest one before disaster...:( now i'm copying also the latest 8 vmdk, 138gb, to the I:...leidian vms folder but it takes so very long...when finished i'll do the
last test with this last 8th vmdk and i'll tell you

thxs again for yr kind and gentle helping and patience cheers

p060477 commented 1 year ago

done also latest test on the 8th vmdk of 138005 MB: same as 7h and 6th of 61551 MB and 33730 MB: they all are the one backed on 28th april on ext hd so seems that what i've done after that date ...up to disaster , in nearly about 30days, has been disappeared...volatilized .. :( what do you think...?? thxs again for yr kind patience and precious helping cheers

badrelmers commented 1 year ago

then we reached the end , we can do nothing more bro. even the FBI cannot extract more now lol have a good day

p060477 commented 1 year ago

i wish have had a bro like you my life should have been much more easy and sweet

1) you ask: "explain to me how you was saving the whatsapp discussions? tell me the method you used in detail and where you were saving those discussions."...: simply no method...it was automatic...for ex: let take the 2nd vmdk recoverd, 8428 MB , in that my whatsapp was at 06.dec.22 in it there were 4 chats open with the dialogues, sent/received, at that date in the one backed on 28th apr 23 in my ext hd ,which is the same as 6th - 7th recoverd now, there was a one more chat,so the persons rise from 4 to 5 and the dialogues are at 28th april 2023 in the one lost in disaster at the end of may, the one that you said nor also FBI should be able to recover the chats were still 5, so persons were still 5 not increased or rised, but the dialogues were at that end of may to sum up i lost dialogues with those 5 persons from 28april to the day of my disaster, nearly 1 month, is there a way to recover them from whatsapp?...if yes how...?

2) the strange thing is that i put -manually- the lost data.vmdk in the myVMBOX so before disaster i have 2 copies: one in myVMBOX + sdcard.vmdk but the other was still in my LDPlayer-vms-leidian0 folder how the hell deleting all files in the VBOX control panel gui has left live sdcard.vmdk in both folders but has deleted also the one data.vdmk in LDPlayer folder..??

3) and for my curiosity: i lost the last data.vdmk and made this terrific disaster cause my iam was to use this vmdk in MYVBOX, seeing it got errors and did not start i choose to delete it...but.. have you tried if my aim was possible...?? i mean have you also tried to use the leidian data.vmdk and sdcard.vmdk in my VBOX...?? is really impossible...or is only that i'm so ignorant and stupid that i should not have to do something beyond my so poor capacities...??

thxs again for yr kind attention and very precious helping

cheers

badrelmers commented 1 year ago

is there a way to recover them from whatsapp?...if yes how...?

I have no experience with whatsapp, but i searched google and found some points in the whatsapp support page, read them and test them to see if it works

https://faq.whatsapp.com/1180414079177245/?helpref=hc_fnav&cms_platform=android

https://faq.whatsapp.com/618575946635920/?cms_platform=android

https://faq.whatsapp.com/481135090640375?cms_platform=android&helpref=faq_content

https://faq.whatsapp.com/902477924463699/?helpref=hc_fnav&cms_platform=iphone

how the hell deleting all files in the VBOX control panel gui has left live sdcard.vmdk in both folders but has deleted also the one data.vdmk in LDPlayer folder..??

this is exactly what I want to understand too :)

is really impossible...or is only that i'm so ignorant and stupid that i should not have to do something beyond my so poor capacities...??

no, I could not make it to work too; I tested different methods but none worked, ldplayer is complex

p060477 commented 1 year ago

1) a curiosity: in case the latest 8th recovered,the one of 138gb.... was the oldest one missed...should have i only that way, copy up to 138gb in ldplayer-vms-leidian0 folder...??... so that tool should occupied at least 138gb of the hd space , instead of the oldest 8gb...?? or there should be a method to shrink that 138gb...?

2) and are you able to define a custom signature as: https://www.file-recovery.com/recovery-user-signatures.htm to search only for those .vmdk files? i have already read that page linked but we are not so expertize and skilled so i ask you if you should be able to give me a Custom_Signatures.txt file already suitable to load them as for vmdk custom signature as per : https://www.file-recovery.com/recovery-user-signatures.htm apologize the level of my questions and my very poor skill.... thxs so much again cheers

badrelmers commented 1 year ago

or there should be a method to shrink that 138gb...?

maybe yes, i did not test it but there is methods to shrink a vm disk, but I don t know if it will work with the leidian image

and are you able to define a custom signature

this site https://www.file-recovery.com/recovery-user-signatures.htm does not explain how to do it, but photorec site explain how to get the signature https://www.cgsecurity.org/testdisk_doc/photorec_custom_signature.html

using both articles we will be able to create the signture.

the problem is that Active@ File Recovery does not allow to load the file signature in the free version, you have to buy it to use that option, so we cannot test the signature even if we create one, but theoretically it is not hard to create one...

I see that you are still attempting to recover something with Active@ File Recovery because you think that he will find something better than photorec; you are wrong bro. Active@ File Recovery is not taking a lot of time because he is doing a better job or because he is doing something magical, he takes a lot of time because we did not uncheck all the options here and check only vmdk, as we did with photorec: image

but Active@ File Recovery do not have vmdk, we have to add it manually and to do this we have to buy it. if we uncheck all those options he will make the same time that photorec took, and if we do not uncheck the photorec options: image photorec will take the same long time like Active@ File Recovery

Active@ File Recovery cannot find anything more than what photorec already find. do not lose your time or money with it. photorec is excellent already and for free

p060477 commented 1 year ago

hi and thxs , so to sum up maybe if the old lost vm was the 138gb 8th photorec recovered and leidian image was not shrinkeable i should have been forced to use 138gb of my phy.hd drive instead of the 8gb needed before the disaster...??

about continuing my trying and searches i will follow yr suggest to concentrate all my efforts, even so very poor in expertize and skillness..., only with qphotorec which has already the .vmdk file signature

a question: following yr clear and precise instruction i realize,with qphotorec, that when:

we do this

immagine

and then we pass to this:

immagine

before going to last:

immagine

i've to re-flag again: Whole: Extract file from the whole partition cause the flag has,by itself, return back to its default starting state: Free: Scan for file from unallocated space only

are you experiencing this too ? ...or is a -bug of mine-...??

thxs again for yr very kind and precious patience

cheers

badrelmers commented 1 year ago

i should have been forced to use 138gb of my phy.hd drive instead of the 8gb needed before the disaster...??

to shrink the disk do this:

step 1

now click remove image

now pay attention, click keep, do not click remove, remove will delete the vm permanently as you did with the lost leidian vmdk. so pay attention! image

step 2

c:\myVirtualBox\VBoxManage.exe "O:\leidian\data.vmdk" "F:\vmdktest\data.vdi" --format vdi

you should get at the end N:\vmdktest\data_shrinked.vmdk , this is your shrinked vm, name it to data.vmdk and test it in leidian, it will not shrink to 8gb , but may be 11 or 12gb we cannot do better.

are you experiencing this too ?

yes it is normal

p060477 commented 1 year ago

hi, first thxs so much again with qphotorec had many tries but no any useful results different from which already reported to you i'd like to try as final the active undelete tool but i'm here again to ask you how to add the custom signature vmdk... here is a guide but is really above my poor skills at all ... https://www.active-undelete.com/custom_file_signatures.htm are you able to make this...: UserFileSignatures.zip but obviously is not suitable due to my so very few and poor knowledge...:( are you able to make a working one and uploading here? thxs so much again from the very deep of my old heart... cheers

badrelmers commented 1 year ago
p060477 commented 1 year ago

hi, first thxs again for yr kind patience i realize that yr custom signatures ini is very similar to mine...:

`[TEMPLATES] TEMPLATE1=VMDK

[VMDK] DESCRIPTION=Leidian VM EXTENSION=vmdk MAX_SIZE=655350000 BEGIN=VMDK_HEADER

[VMDK_HEADER] \sall of them=1|31 `

your

`[TEMPLATES] TEMPLATE1=VMDK

[VMDK] DESCRIPTION=Leidian VM EXTENSION=vmdk MAX_SIZE=655350000 BEGIN=VMDK_HEADER

[VMDK_HEADER] \x4B\x44\x4D = 0 | 0 `

sure..??...i thought mine was all bad... sure is correct: MAX_SIZE=655350000.....??

thxs in adv cheers

badrelmers commented 1 year ago

yes i used your template, you were very near, except \sall of them=1|31 you had to put \x4B\x44\x4D = 0 | 0

yes 655350000 is fine, you can put what ever you want the important thing is that it have to be greater than the vmdk size

p060477 commented 1 year ago

thxs again but...it means max 685mb...??... infact ,at this moment,56% of total scan, is finding 36 vmdk -all - of 685mb size...: Immagine

and now is finished...51 files all of 625mb... try to recover and i realize that are -all- of 625mb.... i really think that there is something wrong...what you think...?? thxs again

cheers

badrelmers commented 1 year ago

oh yes, i was wrong, i converted it with my eyes while I was sleeping and it appeared to me to be 600GB+ lol

I just discovered that we have to put the exact size of the lost vmdk!!! because vmdk files do not have a known end of file offset,so the program use the size to find the end!! send me the size of the two vmdk files backups that you have, do you know the size of the lost vmdk?

if you do not know then do this: change the size to: 9000000000 if you found nothing change it to 8536192999

read this to get an idea of how hard it is to recover vmdk by signature

https://communities.vmware.com/t5/Virtual-Machine-Guest-OS-and-VM/Raw-recovery-on-VMFS-need-file-signatures/td-p/764739

http://sanbarrow.com/vmdk-experts.html#scanforvmdkfiles

we are fishing in the dark

p060477 commented 1 year ago

thxs so much indeed again

1) of course i do not know the -exact- size of the lost one....i remember it was more then 8gb and less then 9gb...so which size have i to put...?? 9000000000 -> 8.3819 Gigabytes 8536192999 -> 7.94995 Gigabytes

2) and if this is the behaviour of vmdk signatures research how the hell qphotorec works fine...??

3) and also the old yr sw: getdataback 4.33...??...that also transform the start size, in yr test case 600mb to up to 8-9gb...??

thxs again cheers

badrelmers commented 1 year ago

1- test with: 10000000000 then 9500000000 then 9000000000 then 8536192999

2- qphotorec was guessing the size, that is why he converted 600mb to 8gb and 8gb to 130gb

3- getdataback cannot find vmdk once it is overwriting, it can only find non overwritten vmdk's

p060477 commented 1 year ago

hi, thxs so much again you write: "so the program use the size to find the end!!"...: what does it mean...??...for ex now i'm searching with size: 9000000000 and i see that it's finding at this moment,36 pct scan: 26 vmdk files of extact 8.38gb what does it mean? that all are exactly of 8.38gb...??...seems very very rare and strange..... or it means that their final size is 8.38gb...so it should means that they are at least of 8.38gb...but may be of different sizes...for ex one may be 8.57gb...and so on... am i totally wrong? have i said a silly thing..?? apologize my very poor and bad level... cheers

badrelmers commented 1 year ago

the size does not tell us too much, because two vmdk files that have the same size may have different content, because a vmdk file is a virtual disk which means there is empty space inside it sometimes, so you may write something inside the vm but its size do not change because the vm used the free space he have inside, so you cannot know if those files are the lost one until you test them with leidian

p060477 commented 1 year ago

yes of course but the question is: now ,at 86pct of scan, has found : n 49 of 8.38gb vmdk files....do you think that is it possible that i've 49 vmdk files -all- of the same 8.38gb size...??...now as a try i'm recovering some and -all- are of 8.38gb.....do you think is it possible...??...i think that if for ex i put max size in signatures.ini : 90kb it should find thousands of vmdk files...and -all- of 90kb.....but as you may think it is not possible i've on pc thousands of vmdk files -all- of exact 90kb size...isn't it?...

badrelmers commented 1 year ago

he search blindly, when he find a \x4B\x44\x4D in the hard disk he start copying until he arrive to 8.38gb, if for example you copied the vmdk file 10 times, and nothing overwrited that space then he will blindly copy 10 vmdk because he found 10 \x4B\x44\x4D. he does not know what he is copying, he just search for \x4B\x44\x4D and once he find it he will start copying until he arrive to the size limit you defined in the ini file. so if the file was fragmented (half was writen in the begining of the hard disk and the other half was written to the end of the hard disk) then he will copy wrong data because the vm was not written as one piece in the harddisk.

as I told you we are fishing in the dark :)

p060477 commented 1 year ago

apologize my ignorance...what does it means: "\x4B\x44\x4D"...: pls explain it as you were talking to a very littlke and stupid child...

and if my lost vmdk should be from 8.4gb - to may be 8.9gb what size you should suggest in signature ini...?? thxs again for yr patience cheers

badrelmers commented 1 year ago

and if my lost vmdk should be from 8.4gb - to may be 8.9gb what size you should suggest in signature ini...??

to be sure you have to test all this test with: 10000000000 then 9500000000 then 9000000000 then 8536192999

10000000000 should already find everything but if not then test the next and if not then the next...

.what does it means: "\x4B\x44\x4D"...:

it is the start of any vmdk file, download https://mh-nexus.de/downloads/HxDPortableSetup.zip

unzip it and start HxD.exe , drag and drop the vmdk to it, you will see image

as you see the vmdk start with 4B 44 4D, so we add to it \x which means hexadecimal, so it become \x4B\x44\x4D, now when the recoveery program read the hard disk he searches for anything that have 4B 44 4D ,that s all

every file in your pc have a different signature, here is a list of them https://en.wikipedia.org/wiki/List_of_file_signatures

p060477 commented 1 year ago

thxs again if i have understood i should invert yr schedule: from: 8536192999 as first to : 10000000000 as last cause if my lost vmdk is for ex 8.8gb with the size max set to 10000000000 i do not find it...am i wrong? thxs so much again

badrelmers commented 1 year ago

it does not matter, at the end you have to test them all... with 10000000000 you should find it too

p060477 commented 1 year ago

hi, first so many thxs proved hundreds of 8.38gb data.vmdk files recovered by active file... all are -default- one...as i started ldplayer for the very first time.... to sum up the sw that at least found useful vmdk,even if not the last lost one, was qphotorec... anyway now i'm really forced to give up and raise white flag... :( thxs again for yr kind attn and patience too wish you all the very best cheers

badrelmers commented 1 year ago

thank you bro ,I m sorry for you, but as an old proverb says " what it does not kill us, it teach us" take care and have a good time

p060477 commented 1 year ago

another lesson i'm learning that problems do not come alone... i was trying the other vm,not the leidian0, but a wm of win xp pro created with GreenVBox and this was working so fine...but now when start it ask me to activate xp...??... my xp was well activated... but anyway i follow also this guide: https://leucalipto.blogspot.com/2021/04/come-disattivare-lattivazione-di.html at the restart re ask me activation ...i click yes..it replies that my xp is activated but it does not start and re ask me activation...at libitum...in a dramatic loop... :( and now i try also this on my greenvbox, where i created this vm and where it worked so fine..and..: same terrific loop... :( so may be using the tip: https://gist.github.com/badrelmers/20990cd518fed05e5f171961c63e85ba issue a sort of -quantic behaviour- ...so bugging the vm in vb means also bugging the other from which it went off... and now it is very clear also the drama with deleting the files with leidian.... maybe the script and moreover this: "open c:\myVMBOX folder (c:\myVMBOX is just a symlink shortcut to your USB folder F:\myVMBOX), you have to open c:\myVMBOX for this trick to work not F:\myVMBOX."...: create this quantic behaviour.... deleting a vm delete also the vm in other directory (leidian) bugging a vm issue the same bug in the original vm (win xp pro created by greenvbox)......

so the lesson for me was: i had greenvbox that worked so fine now i have 2 sw and -both- did not work... :(

badrelmers commented 1 year ago

no, the symlink have nothing to do with this.

anyway, activating xp with the OOBETimer trick is known to not stay working forever, it happened to me too always before.

to reactivate your xp now you can follow this trick https://www.youtube.com/watch?v=wzTuHuWhdcY or follow this guide https://www.wikihow.com/Activate-Windows-XP-Without-a-Genuine-Product-Key , see the part titled Fixing the Windows Activation Loop

but as i told you it will stop working at any time...

the correct way to install and activate xp is using a volume xp version, xp version called volume are made by microsoft and does not need activation you only have to put a serial number and it will not ask you for activation never

you can download an xp volume edition from: https://archive.org/download/en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974_202202/en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974.iso

then use this serial to activate it: D36RK-QDFFD-BTWWY-BT7KK-43MGM

vl in ...cd_vl_x14-73974.iso means volume

p060477 commented 1 year ago

Hi Badr, again so many thanks for yr kind helping is there also a way to recover all the config and sw i have in my looping win xp vm...??... cause to make it working i have put in it many sw compatible...for ex to navigate cause ie8 was not supported yet...then an emule configured and so many other sw that were compatible with win xp 32 bit...it was not so easy for me...cause now i'm using win 10 since 2015...so to dress up that win xp as vm guest was not so simple... so i'd like not to loose all that precious heavy work... is there a way to recover the sw and the config and options/optimization i did..??

and is there also a win xp -volume- iso for italian language...?? thxs so much again cheers

badrelmers commented 1 year ago

oops I forgot about the language, here is the italian one: https://archive.org/download/WinXPProSP3Italian/it_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73994.iso

i do not know if the same serial will work , if this does not work D36RK-QDFFD-BTWWY-BT7KK-43MGM , then use this Serial: Q8VBM-34FWW-7DFFY-DG34X-DP79J

is there also a way to recover all the config and sw i have in my looping win xp vm...??...

have you tried to activate your broken xp using the method in the links I posted above? it did not work?

p060477 commented 1 year ago

hi Badr and so many thanks again yes step 3 works and kills the loop so now i'm in....the first 2 steps i think are obsolete cause i've just the OobeTimer setted and as you well said this not last forever....so the only useful is step 3 the other were for activating but mine is already activated... the worst thing is that also this 3rd step/trick will last... as i've understood now i've only other 3 chances left... so my aim will be to have my old well configured vm win xp machine activated -forever-... i tried the microsoft toolkit 2.73...but i'm not able to run it in win xp 32 bit... always got error 0xc0000135 is there another usefull way...?? thxs so much again cheers

badrelmers commented 1 year ago

i do not know any crack that we can compile to be sure it is safe to use. i cannot tell you about any crack because I cannot be sure it is clean and safe...

the best you can do is to install the xp volume edition and copy all your files and configs from your old xp to your new xp volume edition.

p060477 commented 1 year ago

hi Badr and thxs so much again: "the best you can do is to install the xp volume edition and copy all your files and configs from your old xp to your new xp volume edition."...: is there a simple or best way to do it...?? apologize the very low and bad level of my question...but as you know i'me so ignorant and unskilled.... thxs again for yr patience cheers

badrelmers commented 1 year ago

there is no simple way to copy the config files of all the apps , every program have different method. but in general most of the times copying the program folder is sufficient if it is portable. but you may have installed other programs in a non portable way, in that case you have to know where the config files are saved then copy them.

so start by copying the programs folders to the new xp, and test them in the new xp, if some program did not work as you expect tell me its name and I will see how to do it...

p060477 commented 1 year ago

hi and thanks again so you think that using as for ex KMSpico in the win xp vm and trying to have the activation lasting forever is impossible...?? on their site they state that with their tool they bypass the grace period and their activations will not last... you do not believe that this they state. should be true ?? thxs so mcu again for yr kind patience cheers

badrelmers commented 1 year ago

there is one million KMSpico site, and most of them are clearly a virus/troyan, how do you know that you are using a clean version? I do not trust any of them and warn you to use them. use the method I told you, an xp volume + serial, this is the safest method, the xp cd is confirmed to be clean thanks to the hash calculation, the italian version you downloaded is 100% clean based on the hash calculation. so you are safe to go with this method...

you can confirm that your cd is original using this site to compare the hash: https://files.rg-adguard.net/file/a096638e-fb21-727a-8c37-cf0d9bb830df

the italian cd you downloaded have this hash:

MD5: | 8158bcc0474d3dfc0d8d33bfea1771d9
SHA-1: | a04d68b0fc8b97eec1da9277e5d8126f318596dc
SHA-256: | 31f163b21b6d10db29962a1fcfcea8cc830a513658ed81d0652fe4346f421fe3

so it is clean and original cd

p060477 commented 1 year ago

hi Badr and thxs so much again i had a very old copy of KMSpico 10.2.0 on a ex usb...i think is about 2016 or so on...when the official site was still reachable and the official vers downloadable... now if i try i always get: error time failure... also with Tor... anyway i do not trust to run it in my host win 10 to see if it works..anyway i give it a try in my guest win xp and in a -portable way-...this is the log i get: Time Start: 14/06/2023 18.48.01

18.48.01.701 Checking Internet Connection... 18.48.01.911 Internet Connection Detected 18.48.01.911 Synchronizing Time... 18.48.01.981 Windows Detected: Microsoft Windows XP : : 5.1 : 2600 18.48.01.991 Using host Local: xxxxxxxxxxxxxxxx 18.48.02.001 Opening Firewall Port... 18.48.02.011 Opening Firewall App... 18.48.02.041 Error: Opening Firewall App 18.48.02.051 KMSEmulator Port: 1688 18.48.02.071 IPv6 failure. Trying IPv4 only 18.48.02.071 Error: Indirizzo utilizzato incompatibile con il protocollo richiesto Start 18.48.02.091 KMSEmulator running port: 1688 18.48.02.151 Version Windows Skipped 18.48.02.151 Office 2013 Skipped 18.48.02.151 Office 2016 Skipped 18.48.02.151 Office 2010 Skipped 18.48.02.151 Closing Firewall Port... 18.48.02.161 Set Registry : HKEY_CURRENT_USER\Control Panel\Desktop:PaintDesktopVersion 18.48.01.821 Time synchronized 18.48.03.182 Time Finish: 14/06/2023 18.48.03

what you think...?? thxs so much again for yr kind attn and patience too... cheers

badrelmers commented 1 year ago

i had a very old copy of KMSpico 10.2.0 on a ex usb...i think is about 2016 or so on...when the official site was still reachable and the official vers downloadable...

and how do you know that it was the official site?? :)

first, kmspico should not connect to internet at all, your KMSpico attempt to connect to internet, this is clear that this is not the original KMSpico, you are simply given your pc for free to a hacker using this tool :/ , so delete that hell. thanks to God that it did not work :), xp cannot connect to the newer TLS websites without some dirty work...

in fact there is an old method that uses KMS and an external webserver that you create and this can activate windows, but KMS works only for volume editions; kms is not kmspico , i m talking about the technology that kmspico is using , kms is a technology developed by Microsoft that enables organizations to activate Microsoft products but you need a volume edition. if I remember well there is no kms for xp if it is not a volume edition ,non volume xp editions can only be activated using cracks that replace some OS files...etc

and using that old KMS method did not even need an exe, it worked using a simple bat file with 3 or 4 lines! so it is obvious that your kmspico is not clean and the attempt to connect to internet is a very high risk.....

and if you think that a virtual machine can protect you from hackers then you are wrong:

and because you know nothing about security then your win10 for sure he have all the default ports opened, and because you use the bridged network as you told me before, then you can be easily hacked using the network, windows is full of known vulnerabilities that hackers and ransomware viruses can use.

i do not even need to find a 0 day vulnerability, with a simple ARP interception server inside the VM i can manipulate your internet traffic and do what ever I want because i m in your network when you use the bridged ethernet network of virtualbox.

virtualbox guide say it clearly here: https://www.virtualbox.org/manual/ch06.html#network_internal

Even though technically, everything that can be done using internal networking can also be done using bridged networking, there are security advantages with internal networking. In bridged networking mode, all traffic goes through a physical interface of the host system. It is therefore possible to attach a packet sniffer such as Wireshark to the host interface and log all traffic that goes over it. If, for any reason, you prefer two or more VMs on the same machine to communicate privately, hiding their data from both the host system and the user, bridged networking therefore is not an option.

again, install xp volume and move your files from the old xp to the new xp

p060477 commented 1 year ago

Hi Badr, thxs again for all you are doing for me just for knowledge the site it was attempting was:

18.48.01.701 2023.06.14 AutoPico 16.1.0.0 Official Site: http://forums.mydigitallife.info/forums/51-KMS-tools KMSpico v10.2.0 Time Start: 14/06/2023 18.48.01

18.48.01.701 Checking Internet Connection... 18.48.01.911 Internet Connection Detected 18.48.01.911 Synchronizing Time... 18.48.01.981 Windows Detected: Microsoft Windows XP : : 5.1 : 2600 18.48.01.991 Using host Local: xxxxxxxxxxxxxxx 18.48.02.001 Opening Firewall Port... 18.48.02.011 Opening Firewall App... 18.48.02.041 Error: Opening Firewall App 18.48.02.051 KMSEmulator Port: 1688 18.48.02.071 IPv6 failure. Trying IPv4 only 18.48.02.071 Error: Indirizzo utilizzato incompatibile con il protocollo richiesto Start 18.48.02.091 KMSEmulator running port: 1688 18.48.02.151 Version Windows Skipped

do you think that was hacked?

and second: i use bridged net cause is the way to have emule with both 2 cross green so server/kad connected not firewalled do you think should be better to use another network choice as Nat or something else?

thxs so much indeed again

cheers

badrelmers commented 1 year ago

http://forums.mydigitallife.info may be relatively safe, but i do not trust any crack that i do not compile myself

and how do you know that kmspico was attempting to connect to mydigitallife??? i do not think this is true, what you posted only show that it was created by someone who posted it in mydigitallife, and you cannot be sure...

do you think that was hacked?

maybe yes maybe no

do you think should be better to use another network choice as Nat or something else?

with NAT it will not be easy for you to open the incoming port for emule, but why are you still using emule? he is dead from a long time, there is few servers with useless content I think today, what do you find in emule that you cannot find in the web or torrent?

p060477 commented 1 year ago

hi Badr and thxs so much again, so you think also this maybe unsafe..??..: https://forums.mydigitallife.net/threads/kms_vl_all-smart-activation-script.79535/#post-838808

and how to open emule port's using NAT..?? ...cause i understand that NAT is more safe that bridged..am i wrong..??

i use emule cause the very very old stuff, maybe with only 1-2 seeders and that you have to still wait to dl for days and days you can find only in emule..who is so crazy and out of time, like me..., to have still patience in this speedy world..??

thxs so much again

cheers

badrelmers commented 1 year ago

so you think also this maybe unsafe..??..

KMS_VL_ALL is made by abbodi1406, this is the only guy I trust 99%, he gave for free the source code of KMS_VL_ALL, so you can compile it if you know how. but anyway you cannot use KMS_VL_ALL with your actual xp,the VL letters in KMS_VL_ALL means volume, it is for volume editions, and xp does not even need a crack if it is a volume edition as I told you, so you only need a serial.

and how to open emule port's using NAT..??

image